Privacy policy

1. Who we are

themusclepedia (The Muscle Pedia) is an independent bodybuilding encyclopedia. This policy describes how we handle personal data in compliance with Brazil's LGPD (Law nº 13.709/2018).

2. Data we collect

Account: when you create an account (by email or Google sign-in), we store your email, username and login provider. Comments, Pick'Em picks, predictions, card collection and followed athletes are linked to your account.

Optional profile fields: photo URL, biography, country and favorite division. Corrections or Pro athlete submissions may include name, email and submitted text to review and respond; do not send identity documents, health data or other sensitive information. Moderation records retain account-linked safety state and events.

Browsing: we store preferences such as language and theme in your own browser (local storage). We do not sell personal data to third parties.

3. How we use it

Account data is used exclusively to operate the site's features: authentication, moderated comments, picks, card collection and personalization. The legal basis is performance of the terms of use (LGPD art. 7, V) and legitimate interest in keeping the service secure and reliable (art. 7, IX).

4. Sharing

Lovable Cloud provides hosting, database and authentication. Google provides optional sign-in and, only with consent, visit analytics. Forum submissions pass through an AI moderation service. Comments, usernames and optional profile fields may be public; your email is not displayed there. Providers may process data outside Brazil, subject to applicable international-transfer safeguards.

5. Your rights

On My account you can edit your profile, download your data as JSON and delete your account. Deletion removes follows, picks, votes, cards, comments and your forum text; other people's replies remain without your text. Withdraw analytics consent through Cookie preferences in the footer. For other rights or submissions outside an account, contact our official Instagram; full-access requests follow the statutory 15-day period after identity verification.

6. Security and retention

Account data and linked activity remain while the account exists; optional fields can be cleared anytime. We use encrypted connections and access controls. We retain the latest eight private weekly backups (about eight weeks); deletion also removes your data from these copies. Provider operational backups and earlier manual exports may remain until their applicable retention expires; instant erasure there is not promised. A restricted deletion record prevents erased accounts from returning after restoration. Sporting decisions remain with the responsible person's identity detached. Provider log and Google analytics retention settings still require verification; we do not claim an unverified period.

7. Cookies, analytics and external content

Sign-in uses necessary session storage. Language, theme, news cache and load recovery remain in the browser; the language country preference expires after one day. We also store your consent choice. Google Analytics stays off until acceptance, using public page visits and device/browser details to measure usage based on consent. We do not send email, account IDs, search queries or private-page URLs; advertising signals are disabled. Refusing or withdrawing does not restrict service. Withdrawal stops analytics and removes accessible analytics cookies. YouTube videos load only on Play; Google text fonts load to display the site and may disclose your IP. Search Console uses aggregated search data and installs no browser cookies.

8. Privacy contact

For any privacy matter, write to us via direct message on our official Instagram: